Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/GhJQnk8qcw4WmTfUCDO7iT7nuYw.mft
File: GhJQnk8qcw4WmTfUCDO7iT7nuYw.mft (raw, json)
Hash identifier: YMyxkbWtE788qlB1i4ugkBwnIEJUxFw0f+AZ0w4Rang=
Subject key identifier: 85:6C:B5:6F:AA:A1:79:C4:89:2C:0E:93:3B:6D:D0:56:17:49:5D:7B
Authority key identifier: 1A:12:50:9E:4F:2A:73:0E:16:99:37:D4:08:33:BB:89:3E:E7:B9:8C
Certificate issuer: /CN=1a12509e4f2a730e169937d40833bb893ee7b98c
Certificate serial: 019D27A8B18764F8FA6BC17E3C6C32F5FFAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GhJQnk8qcw4WmTfUCDO7iT7nuYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/GhJQnk8qcw4WmTfUCDO7iT7nuYw.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 01:01:00 +0000
Manifest this update: Thu 26 Mar 2026 01:01:00 +0000
Manifest next update: Fri 27 Mar 2026 01:01:00 +0000
Files and hashes: 1: GhJQnk8qcw4WmTfUCDO7iT7nuYw.crl (hash: JWwfDEw7Mzqz4tM6r3gY9AcBJK4ixmxln5WX/MupCe4=)
2: LiC_HAv2ieS9qZCIroR8UZoFlPI.roa (hash: R+F8lZe1pX4qczdw7OYcz3GuxYj0Q6ggGPfm7H8FjeE=)
3: i1r9TcXNXsbzaMSqfIgjvx7tIUc.roa (hash: KYoEYuLGKlqcsdZuYcCfv5Zk9kbtA+bdbC5coofITqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/GhJQnk8qcw4WmTfUCDO7iT7nuYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/GhJQnk8qcw4WmTfUCDO7iT7nuYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/GhJQnk8qcw4WmTfUCDO7iT7nuYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:b1:87:64:f8:fa:6b:c1:7e:3c:6c:32:f5:ff:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a12509e4f2a730e169937d40833bb893ee7b98c
Validity
Not Before: Mar 26 01:01:00 2026 GMT
Not After : Mar 27 01:01:00 2026 GMT
Subject: CN=856cb56faaa179c4892c0e933b6dd05617495d7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:25:71:99:04:22:e7:6d:46:20:b1:36:05:ce:
15:2b:4e:23:d2:e0:77:4d:b3:c9:54:4b:a3:52:4e:
e1:a1:db:2a:b1:be:85:3c:0e:35:dc:16:31:47:d2:
66:8e:ff:ea:a6:c9:8d:56:c9:7a:a4:c5:67:7f:4e:
14:e9:88:84:af:69:1c:fe:92:0e:05:0a:fd:9c:ce:
60:7d:97:cb:2d:98:27:c0:5e:da:10:fb:a3:1c:c7:
4d:97:9b:f2:5e:c2:fd:a2:c5:20:2d:39:e4:f8:b7:
79:80:35:d0:5a:cf:9f:20:51:41:c2:fa:c3:75:5f:
b7:26:d5:45:05:5a:0b:b1:f1:96:7e:81:5e:1b:dd:
7f:0f:d0:55:cb:19:11:92:50:17:35:fd:f7:f0:1f:
c8:a7:5d:29:20:8a:4b:79:54:25:76:ca:b5:90:ab:
1f:74:0a:6b:19:3b:1f:46:9b:c5:01:09:fc:cc:92:
f4:9b:83:05:db:c0:d4:de:3d:30:56:a5:db:04:2b:
d6:89:c9:06:90:65:ce:82:d5:ce:f7:ea:31:37:77:
e2:f5:79:3e:0b:ee:71:bf:05:c1:e5:68:13:d5:9d:
89:87:01:e4:19:af:0c:f6:68:a2:c6:34:21:ce:72:
ce:5f:92:e9:0a:cc:ce:4a:c2:01:eb:63:80:db:9f:
8b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:6C:B5:6F:AA:A1:79:C4:89:2C:0E:93:3B:6D:D0:56:17:49:5D:7B
X509v3 Authority Key Identifier:
keyid:1A:12:50:9E:4F:2A:73:0E:16:99:37:D4:08:33:BB:89:3E:E7:B9:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GhJQnk8qcw4WmTfUCDO7iT7nuYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/GhJQnk8qcw4WmTfUCDO7iT7nuYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/GhJQnk8qcw4WmTfUCDO7iT7nuYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:ae:7a:2e:70:0f:da:b4:f3:01:76:a3:ec:ed:b9:a3:06:46:
6d:e7:fc:7b:67:91:f2:18:c6:08:59:eb:0a:ea:7d:d5:45:ce:
df:74:ff:c6:a6:ba:e7:e2:1e:01:7d:7c:7f:b1:4a:f7:b4:eb:
12:03:00:b1:33:fa:02:65:4e:b0:23:45:32:d6:10:f8:e2:d4:
e6:e3:0e:e6:6d:f0:cf:7d:e1:bb:c5:ba:a1:a6:3c:80:f9:2e:
93:82:4a:8e:78:9c:58:f6:d2:06:e0:33:a6:6e:66:32:86:7a:
f0:dd:b6:7b:15:be:e3:b8:11:e0:f9:2f:20:ae:9e:a2:de:5e:
5e:e3:85:e4:cd:15:f5:87:1f:0b:54:d1:16:41:f2:f7:14:e9:
cc:62:6a:e0:a0:b2:6c:94:6f:c6:2d:5a:d7:05:61:7d:8b:a7:
46:ca:58:c6:66:61:0d:7d:93:bf:a1:4e:ad:9b:49:47:e8:c1:
11:1a:c5:eb:0f:3a:05:ab:99:ac:75:9d:51:d3:d7:b6:60:b0:
7d:c5:f6:e4:85:f4:db:ed:6e:2c:09:2f:2c:37:48:38:ea:69:
dd:ad:84:e8:1a:f9:2b:7c:85:c0:ed:ab:8a:78:82:71:82:7d:
ad:ff:24:76:8f:20:12:20:13:76:77:1d:c7:98:45:b8:87:97:
32:ce:19:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:11:25 2026 by rpki-client